WordPress Plugin Vulnerabilities

AllWebMenus 1.1.3 - Remote File Inclusion

Description

The AllWebMenus WordPress Menu Plugin WordPress plugin was affected by a Remote File Inclusion security vulnerability.

Affects Plugins

Plugin icon
allwebmenus-wordpress-menu-plugin
Fixed in 1.1.4

References

CVE
CVE-2011-3981
Exploitdb
17861

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Verified
No
WPVDB ID
7aca0b4a-d54b-47a6-8144-c1fabe035ef3

Timeline

Publicly Published
2011-09-19 (about 14 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-01-01
Title
Frappé <= 1.8 - Unauthenticated Local File Inclusion
Published
2026-03-02
Title
Healer - Doctor, Clinic & Medical WordPress <= 1.0.0 - Unauthenticated Local File Inclusion
Published
2025-12-23
Title
Diza < 1.3.16 - Authenticated (Contributor+) Local File Inclusion
Published
2025-09-05
Title
Mamita <= 1.0.9 - Unauthenticated Local File Inclusion
Published
2026-02-25
Title
Tooth Fairy - Dentist & Dental Clinic WordPress Theme <= 1.16 - Unauthenticated Local File Inclusion